Read the docs
TI-2019-04781 Aliases CVE-2019-6744GHSA-vr56-g7hp-gjv6

Improper access control in Samsung Knox

Priority LOW 20CWE-284Published · Updated

Key facts

Attack vector
Physical
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-284.

Summary

This vulnerability allows local attackers to disclose sensitive information on affected installations of Samsung Knox 1.2.02.39 on Samsung Galaxy S9 build G9600ZHS3ARL1 Secure Folder. An attacker must first obtain physical access to the device in order to exploit this vulnerability. The specific flaws exists within the the handling of the lock screen for Secure Folder. The issue results from the lack of proper validation that a user has correctly authenticated. An attacker can leverage this vulnerability to disclose the contents of the secure container. Was ZDI-CAN-7381.

Why it matters now

EPSS 0.00364 30th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SamsungKnox1.2.02.39 on Samsung Galaxy S9 build G9600ZHS3ARL1—No fix listedCNA
  • Knox VendorSamsung Affected 1.2.02.39 on Samsung Galaxy S9 build G9600ZHS3ARL1 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:samsung:knox:1.2.02.39:*:*:*:*:*:*:*1.2.02.39VulnerableSamsung
cpe:2.3:h:samsung:galaxy_s9:-:*:*:*:*:*:*:*not specified by NVDRunning onSamsung
  • cpe:2.3:a:samsung:knox:1.2.02.39:*:*:*:*:*:*:* Versions 1.2.02.39 Vulnerable ·Samsung
  • cpe:2.3:h:samsung:galaxy_s9:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Samsung

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-6744
  2. 2026-10-03 Alias added: GHSA-vr56-g7hp-gjv6

References

Advisory 1

Other 1

  • TI-2016-03397 ClipboardDataMgr in Samsung KNOX 1.0.0 and 2.3.0 does not properly check the caller… CVSS 3.0MEDIUM 5.5
  • TI-2016-01758 Samsung KNOX 1.0.0 uses the shared certificate on Android, which allows local users to… CVSS 3.0MEDIUM 5.5
  • TI-2016-01757 Samsung KNOX 1.0 uses a weak eCryptFS Key generation algorithm, which makes it easier for… CVSS 3.0MEDIUM 4.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences